Severity scale  
  (70/100)

PC Live Guard. How to Remove? (Uninstall Guide)

removal by - -   Also known as PCLiveGuard, PCLive Guard, PC LiveGuard | Type: Rogue Antispyware
12
PC Live Guard is a fake spyware removal tool that imitates a system scan and reports false scan results to make you think that your computer is infected with malware. If you take a look at Live PC Care malware, you will see that these two programs are basically the same thing. Both impersonate Windows Security Center to make this scam look more realistic. PC Live Guard is promoted mostly through the use of Trojans. Once installed, it displays fake security alerts and asks to pay for a full version of the program to remove infections which do not even exist. Do not buy this bogus software and get rid of PC Live Guard from your computer upon detection.

PC Live Guard graphical user interface
[Figure 1. PC Live Guard graphical user interface]

When running, PC Live Guard will create several files on your PC and later will detect those files as malware infections. The files are: cb.drv,sld.drv, CLSV.sys, FW.dll, DBOLE.exe, DBOLE.sys, kernel32.drv, PE.tmp, SM.dll, ppal.dll, SICKBOY.tmp. For example, DBOLE.sys will be detected as Trojan-Spy.Win32.WMPatch infection. Such infection indeed exists, but not in your computer. PC Live Guard uses real infections and their descriptions in case you decide to read more about particular one. That makes this scam even more realistic. Some other malware infections reported by PCLiveGuard:

Trojan-SPW.Win32.Fantast
Trojan-Spy.HTML.Bankfraud.ra
Virus.Win32.Faker.a
BAT.Looper
Trojan-PSW.VBS.Half
Trojan-PSW.Win32.Delf.d
Trojan-Spy.HTML.Paypal.hn
Trojan-Spy.HTML.Bayfraud.hn
Trojan-Spy.HTML.Bankfraud.ix
Trojan-Spy.HTML.Citifraud
Packed.Win32.PolyCrypt
Trojan-Spy.HTML.Sunfraud.a

Pcliveguard.com
[Figure 2. Pcliveguard.com]

What is more, PC Live Guard will display fake security alerts and notifications as shown below. The fake notifications state:


System alert!
malicious applications, which may contains Trojans, were found
on your computer and are to be removed immediately. Click
here to remove these potentially harmful items using PC Live
Guard.


System alert
Click here to remove potentially harmful programs found
immediately using PC Live Guard.

It will also hijack Internet Explorer and display similar fake security warnings while browsing the web. Likely, it will change default search engine to search-gala.com and display its search results. There shouldn't be any doubts about this rogue application. Remove PC Live Guard from your computer as soon as possible using the removal guide below. You may remove it either manually or with an automatic removal tool. Please note, that this malware may block legit anti-spyware applications including Spyware Doctor. If this happens, please use Process Explorer and terminate PC Live Guard and other malicious processes.
If you have inadvertently purchased PCLive Guard, contact your credit card company and dispute the charges. Related files: mozcrt19.dll, sqlite3.dll, cookies.sqlite

PC Live Guard properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall PC Live Guard. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall PC Live Guard. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
STOPzilla
Tested and Confirmed! STOPzilla removes PC Live Guard (2009-12-07 01:17:31)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes PC Live Guard (2009-12-07 01:17:31)
Plumbytes
We are testing Plumbytes's efficiency (2010-01-13 00:13)
Hitman Pro
STOPzilla
Tested and Confirmed! STOPzilla removes PC Live Guard (2009-12-07 01:17:31)
Malwarebytes Anti Malware
Tested and Confirmed! Malwarebytes Anti Malware removes PC Live Guard (2009-12-07 01:17:31)
Webroot SecureAnywhere AntiVirus

PC Live Guard manual removal

Kill processes:
PC339.exe
Delete registry values:
HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_edb11.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "IIL"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:117fc3395e69e29f71abba93a68c4181_7]"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "PC Live Guard"
Unregister DLLs:
mozcrt19.dll
sqlite3.dll

Delete files:
PC339.exe
PCLG.ico
573.mof
mozcrt19.dll
sqlite3.dll
vd952342.bd
PCAWWLG.cfg
PC Live Guard.lnk
cookies.sqlite
gid.tmp
SICKBOY.tmp
sld.drv
Delete directories:
C:\Documents and Settings\All Users\Application Data\117fc\
C:\Documents and Settings\All Users\Application Data\117fc\PCLGSys
C:\Documents and Settings\All Users\Application Data\117fc\BackUp\
C:\Documents and Settings\All Users\Application Data\117fc\Quarantine Items\
C:\Documents and Settings\All Users\Application Data\PCYZDUHBELG
%UserProfile%\Application Data\PC Live Guard
C:\Program Files\Mozilla Firefox\searchplugins\search.xml

Information updated:

Comments on PC Live Guard

0
0
<Guest>
I encountered the pc live guard page and downloaded setup_build6_294 but didn't run it and deleted it, will my pc be ok?

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)